Privacy Policy — How 67bd7 Collects, Uses, and Protects Your Data

This Privacy Policy ("Policy") is issued by 67bd7 ("we", "us", "our") and applies to all personal data collected through the 67bd7 website at 67bd7.io, its associated mobile-optimised web pages, and any related services, tools, or communications provided by 67bd7 (collectively, the "Platform").

This Policy describes how 67bd7 collects, processes, stores, shares, and protects personal information relating to individuals who visit the Platform, register for a player account, make deposits, place wagers, claim bonuses, or otherwise interact with 67bd7 services ("you", "the Player", "the User"). It also describes the rights you hold with respect to your personal data and the channels available to exercise those rights.

By using the 67bd7 Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described in this Policy, you should not use the Platform. This Policy should be read alongside the 67bd7 Terms & Conditions and Responsible Gaming policy, both of which form part of the overall agreement governing your use of the Platform.

67bd7 collects personal information about you through several channels: directly from you when you register or interact with the Platform, automatically as you use the Platform, and from third-party payment processors when you make financial transactions. The categories of personal data collected are described below.

67bd7 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. If you voluntarily disclose any such information in support communications, 67bd7 will handle it with appropriate care and will not use it for any purpose beyond resolving your query.

67bd7 uses the personal information it collects for the following specific purposes. Each purpose is matched to the category of data it relies upon:

• Account Registration and Management: Identity data and contact data are used to create and maintain your player account, verify your identity, and communicate essential account-related information such as password resets and security alerts.
• Processing Transactions: Financial data is used to process your deposits and withdrawals via bKash, Nagad, Rocket, Upay, and participating bank partners. Transaction records are maintained for financial compliance and dispute resolution purposes.
• Identity Verification (KYC): Verification documents and identity data are used to confirm your identity, verify your age as being 21 years or above, and comply with anti-money laundering obligations.
• Platform Security and Fraud Prevention: Technical data and usage data are analysed to detect suspicious activity, prevent unauthorised account access, identify multi-accounting, and protect the integrity of the Platform.
• Game and Service Delivery: Usage data is used to serve game content, personalise your in-platform experience, and ensure the correct application of bonus terms and wagering requirements to your account.
• Responsible Gaming: Usage data and financial data are monitored to identify signs of problem gambling behaviour and to administer responsible gaming tools such as deposit limits, session reminders, and cooling-off periods.
• Customer Support: Communication data is used to respond to your queries, resolve disputes, and improve the quality of the 67bd7 support service.
• Marketing Communications: Contact data is used to send you promotional offers, bonus notifications, and news about 67bd7 where you have consented to receive such communications. You may withdraw consent at any time.
• Legal and Regulatory Compliance: All categories of data may be used as required to comply with applicable laws, respond to lawful requests from authorities, and enforce the 67bd7 Terms & Conditions.

67bd7 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

67bd7 processes your personal data on one or more of the following legal grounds, depending on the specific purpose of the processing activity:

• Contractual Necessity: Processing is necessary to perform the contract between you and 67bd7 — specifically, to operate your account, process your transactions, and deliver the services you have signed up to receive.
• Legal Obligation: Processing is required to comply with applicable legal obligations, including anti-money laundering laws, identity verification requirements, and the retention of financial transaction records.
• Legitimate Interests: Processing is carried out for the legitimate interests of 67bd7, including ensuring platform security, preventing fraud, improving the quality of services, and conducting analytics. 67bd7 has assessed that these interests are not overridden by your rights and interests in each case.
• Consent: Where processing is based on your consent — most notably the sending of marketing communications — you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

67bd7 does not sell or rent your personal data to third parties. However, 67bd7 may share your personal information with the following categories of recipient where necessary and proportionate:

• Payment Processors: Financial data is shared with bKash, Nagad, Rocket, Upay, Visa, Mastercard, and participating banks solely to process your deposit and withdrawal transactions. These processors are bound by their own privacy obligations and data security standards.
• Game Content Providers: Usage data relating to your game sessions may be shared with third-party game studios — including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi — to the extent necessary to deliver their games and report outcomes. These providers are contractually obligated to handle data in accordance with applicable data protection requirements.
• Identity Verification Services: Identity data and verification documents may be shared with third-party KYC service providers engaged by 67bd7 to conduct identity checks. These providers process data solely on 67bd7's behalf and under 67bd7's instruction.
• Analytics and Security Providers: Technical and usage data may be processed by analytics and fraud-detection tools used by 67bd7 to monitor Platform performance and security. These tools are configured to minimise personal data exposure where possible.
• Legal and Regulatory Authorities: Any category of personal data may be disclosed to competent authorities, law enforcement agencies, or courts where 67bd7 is required to do so by applicable law, court order, or binding regulatory requirement. 67bd7 will disclose only the minimum data necessary to satisfy the lawful request.
• Business Transfers: In the event that 67bd7 undergoes a merger, acquisition, restructuring, or sale of all or a substantial part of its assets, player personal data may form part of the transferred assets. Affected players will be notified in advance where practicable.

All third parties with whom 67bd7 shares personal data are required to process that data only for the specific purposes for which it was shared and to maintain appropriate technical and organisational security measures. 67bd7 does not permit third parties to use your data for their own independent marketing purposes.

67bd7 uses cookies and similar tracking technologies on the Platform to improve functionality, analyse usage patterns, and support security operations. A cookie is a small text file placed on your device by the Platform when you visit. Cookies do not contain executable code and cannot carry viruses or malware.

The following categories of cookies are used on the 67bd7 Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as secure login sessions, account authentication, and the maintenance of your active session while you navigate between pages. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymised information about how visitors use the Platform — such as which pages are visited most frequently and whether error messages are encountered. The data collected is aggregated and does not identify individual users. This information is used to improve Platform performance.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming tool configurations — so that you do not need to re-enter them on each visit.
• Security Cookies: These cookies are used to detect and prevent fraudulent activity on the Platform, including the identification of unusual login patterns, multiple account attempts from a single device, and automated bot activity.

Most web browsers are configured to accept cookies by default. You may adjust your browser settings to block or delete cookies; however, doing so may impair the functionality of the 67bd7 Platform, including your ability to log in and maintain an active session.

67bd7 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• SSL/TLS Encryption: All data transmitted between your device and the 67bd7 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. This ensures that your personal data, payment information, and account credentials cannot be intercepted in transit.
• Password Hashing: Account passwords are stored using a one-way cryptographic hashing algorithm. 67bd7 does not store passwords in plain text and cannot retrieve your password — only reset it.
• Access Controls: Access to personal data within 67bd7's internal systems is restricted on a need-to-know basis. Only authorised personnel with a legitimate operational need are permitted to access player data, and all access is logged and audited.
• Intrusion Detection: 67bd7 employs automated monitoring systems to detect and respond to anomalous activity across its infrastructure, including attempted unauthorised access, unusual data access patterns, and denial-of-service attempts.
• Regular Security Reviews: 67bd7's security posture is reviewed regularly to identify vulnerabilities and ensure that protective measures remain current and effective against evolving threats.

While 67bd7 takes all reasonable steps to protect your personal data, no system connected to the internet can be guaranteed to be completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, 67bd7 will notify affected players as soon as reasonably practicable and will take all necessary remediation steps.

You also have a role in keeping your data secure. You must protect your account credentials, avoid sharing your password with any third party, and notify 67bd7 immediately if you suspect any unauthorised access to your account by contacting [email protected].

67bd7 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The following general retention guidelines apply:

• Active Account Data: Personal data associated with an active 67bd7 account is retained for the duration of the account's active status and for a period of at least five (5) years following permanent account closure, to satisfy financial record-keeping and anti-money laundering compliance requirements.
• Transaction Records: Records of all deposits, withdrawals, and wagering activity are retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial regulations.
• Identity Verification Documents: Copies of identity documents submitted for KYC purposes are retained for the duration of the account relationship and for five (5) years after account closure.
• Support Communications: Live chat transcripts and support email records are retained for up to three (3) years from the date of the communication, to support dispute resolution and service quality review.
• Analytics and Technical Logs: Anonymised usage and technical data collected for analytics purposes is retained for up to two (2) years. Server access logs containing IP addresses are retained for up to twelve (12) months.
• Marketing Consent Records: Records of your marketing consent or opt-out preference are retained for the lifetime of your account and for one (1) year following account closure.

Where personal data is no longer required for any lawful purpose and no legal obligation mandates its continued retention, 67bd7 will securely delete or irreversibly anonymise that data. Anonymised data — which can no longer be linked to any individual — may be retained indefinitely for aggregate statistical analysis.

As a 67bd7 player, you hold the following rights with respect to your personal data. To exercise any of these rights, please contact the 67bd7 support team via live chat or by emailing [email protected]. 67bd7 will respond to all valid requests within a reasonable timeframe, typically within 30 days.

• Right of Access: You have the right to request a copy of the personal data that 67bd7 holds about you, along with information about how it is being used. This is sometimes referred to as a Subject Access Request (SAR).
• Right to Rectification: You have the right to request the correction of any personal data that is inaccurate or incomplete. If you identify an error in your account details, you may also update certain fields directly through the account settings interface.
• Right to Erasure: You have the right to request the deletion of your personal data in certain circumstances — for example, where the data is no longer necessary for the purpose it was collected, or where you withdraw consent and no other legal basis applies. This right is subject to 67bd7's legal obligations to retain certain data, as described in the Data Retention section above.
• Right to Restriction of Processing: You have the right to request that 67bd7 restricts the processing of your personal data in certain circumstances, such as while the accuracy of data you have disputed is being verified.
• Right to Object: You have the right to object to the processing of your personal data where that processing is based on 67bd7's legitimate interests. You also have an absolute right to object to the use of your data for direct marketing purposes at any time.
• Right to Data Portability: Where processing is based on your consent or on a contract, and is carried out by automated means, you have the right to receive a copy of the data you provided to 67bd7 in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

The 67bd7 Platform is strictly intended for adults aged 21 years and above. 67bd7 does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not use the 67bd7 Platform, create an account, or provide any personal information to 67bd7 under any circumstances.

67bd7 employs age verification checks during the account registration process to enforce this requirement. Where 67bd7 identifies or is informed that an account has been registered by or is being used by a person under 21, the account will be immediately suspended, all transactions will be voided or reversed where practicable, and any personal data collected in connection with that account will be securely deleted.

If you are a parent or guardian and have reason to believe that a minor in your care has registered a 67bd7 account or provided personal data to the Platform, please contact the 67bd7 support team immediately at [email protected]. 67bd7 will investigate and take appropriate remedial action promptly.

The 67bd7 Platform integrates with a number of third-party services to deliver its full range of features. These include payment processors (bKash, Nagad, Rocket, Upay), game content providers (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi), and operational tools used for analytics, fraud detection, and customer support.

Each third-party service operates under its own privacy policy and data handling practices. While 67bd7 selects its service providers carefully and requires them to maintain appropriate data protection standards through contractual arrangements, 67bd7 is not responsible for the privacy practices of third-party services beyond the scope of data processing conducted on 67bd7's behalf.

Where a third-party service processes your data as an independent data controller — for example, a payment processor applying its own fraud detection logic to your transaction — that processing is governed by the third party's own privacy policy. 67bd7 encourages you to review the privacy policies of payment services you use, including bKash, Nagad, and Rocket, to understand how they handle your financial and personal data.

The 67bd7 Platform does not contain links to external third-party websites. All navigation links on the Platform lead to pages within the 67bd7 domain. 67bd7 is not responsible for any data collected by third-party websites that you may independently choose to visit.

67bd7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in its data handling practices, updates to applicable law, or enhancements to the Platform's services. When material changes are made — meaning changes that significantly affect your rights or how 67bd7 uses your personal data — 67bd7 will notify registered players through the Platform interface or by email prior to the changes taking effect.

Minor amendments, such as typographical corrections or clarifications that do not alter the substantive content of the Policy, may be made without prior notice and will take effect upon publication. The effective date of the current version of this Policy is displayed at the top of this document and in the hero section of this page.

Your continued use of the 67bd7 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised version. If you do not agree with changes made to this Policy, you must stop using the Platform and may request account closure by contacting the support team.

67bd7 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled. The most current version of the Policy is always available at 67bd7.io/privacy-policy.